note
soonix
<p>Hmmm. In this case, my next step would be to look in the DC's event log. (Ours is configured to log failed authentication attempts, I suppose yours does this, too)</p>
And, although the last message says "Password Mismatch", theoretically it could be a misspelt username as well, or even a wrong domain.
11115401
11115418